Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: jG8u7szUHmRcnWMxs2Hg6BsqfLRfTjEF4m7aCOnwZVY=
Subject key identifier: 96:FA:6D:ED:D3:62:87:EF:80:2A:AB:27:FC:02:DF:E4:B8:18:DF:4F
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 0194BD859725BFA50953A5C85660579EF565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: dsb+4NCPJZYwnM0bX8+IvQotFLbmWD75ZiDOZyXZ/F4=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:25:bf:a5:09:53:a5:c8:56:60:57:9e:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=96fa6dedd36287ef802aab27fc02dfe4b818df4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:31:a4:9a:99:f2:44:53:4c:5c:c4:06:d9:
fa:8a:52:f3:de:87:4d:e4:d2:0b:11:e6:80:ad:00:
77:43:9f:fe:18:c1:2c:8a:7c:ae:b4:05:f5:0e:32:
81:39:f4:19:0a:21:9f:0e:ce:f4:42:e9:20:8b:4a:
e5:aa:f5:fa:44:22:37:12:ce:37:65:08:95:45:35:
e0:f5:7d:10:20:cc:03:20:9b:53:39:de:43:2a:7b:
76:8a:9f:3d:48:25:3e:41:96:0b:ad:f0:2e:4c:7e:
f0:07:5e:d4:ab:b4:3b:ff:a3:cc:e5:82:8a:cf:8d:
74:2f:70:65:48:16:8a:fe:3c:3e:4e:47:0d:e9:97:
35:a6:66:90:3a:0f:db:f2:9d:fd:82:84:c6:2d:ff:
ba:5d:4a:fb:fc:41:7d:10:40:4e:6b:d5:58:e3:f8:
69:75:63:4e:c6:0f:39:c1:71:cb:fe:df:9e:52:89:
b0:dc:1d:bd:47:85:21:1d:52:21:f3:d7:57:d2:bf:
dd:d9:c7:5a:7f:71:88:31:f5:97:cf:b0:87:04:e8:
ad:6e:ce:9e:81:bf:52:2b:33:39:0b:8c:c4:c8:f5:
41:2d:4b:8c:d8:ff:89:4c:cc:cd:22:ef:f7:e6:fa:
c7:de:61:7f:84:4f:3e:d4:52:3a:0e:20:6a:5e:e6:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:6D:ED:D3:62:87:EF:80:2A:AB:27:FC:02:DF:E4:B8:18:DF:4F
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:fe:37:a3:10:5f:98:43:b6:d7:a7:27:32:10:3d:a9:89:
e4:a4:65:18:22:aa:7b:b2:6b:35:33:2e:42:eb:c9:2a:cd:0b:
79:d9:4f:9d:83:6c:81:90:aa:1d:e0:8d:f9:53:7f:43:85:1e:
4b:5d:5f:8c:1a:a0:aa:d9:cc:4a:66:1f:1f:8b:bc:e4:72:3f:
00:08:28:22:5d:c3:72:1d:69:d8:2d:a0:61:36:48:1b:bc:96:
ba:24:f3:67:12:02:35:f0:9d:c7:4b:b7:78:38:f2:f3:40:96:
3f:67:37:19:c7:c1:5e:2b:51:18:fa:49:c7:ef:31:97:f9:b4:
10:e3:61:dd:06:c3:59:cc:e3:76:ff:78:57:41:db:3f:83:c1:
9a:58:c3:67:a2:9b:a0:83:ef:ff:5d:52:c2:ce:3b:12:32:4e:
38:6e:7a:b4:3a:b9:5e:81:5e:74:f9:d4:33:2f:12:d7:25:70:
d1:d8:a4:06:1f:1f:da:ee:3b:7a:71:fe:91:c3:a7:18:10:71:
c6:dd:f9:ff:ef:27:34:0b:26:88:92:ec:0b:ad:ed:c0:5b:e6:
2d:ea:ec:c6:5f:d8:e5:e5:f8:28:d3:0f:79:01:30:50:e4:80:
35:b8:af:d3:24:02:8b:ce:d5:aa:3d:7c:bc:19:c6:8a:fc:c8:
bf:da:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:09 2025 by rpki-client